org.broadleafcommerce.openadmin.server.security.remote
Class AdminSecurityServiceRemote

java.lang.Object
  org.broadleafcommerce.openadmin.server.security.remote.AdminSecurityServiceRemote

All Implemented Interfaces:

com.google.gwt.user.client.rpc.RemoteService, AdminSecurityService, SecurityVerifier

@Service(value="blAdminSecurityRemoteService")
public class AdminSecurityServiceRemote
extends Object
implements AdminSecurityService, SecurityVerifier

Service for handeling security with Ajax components. Serves two functions.

• Converts the ServerSide AdminUser to a client level admin user with appropriate roles defined.
• Provides a method to check if the current logged in user matches the client side user and verifies whether that user has access to the entity operation they are trying to perform.

1.

Author:

jfischer

Field Summary

protected ExploitProtectionService	exploitProtectionService
protected AdminSecurityService	securityService

Constructor Summary

AdminSecurityServiceRemote()

Method Summary

AdminUser	getAdminUser()
AdminUser	getPersistentAdminUser()
boolean	isEntitySecurityExplicit()
void	securityCheck(String ceilingEntityFullyQualifiedName, EntityOperationType operationType)
void	setEntitySecurityExplicit(boolean entitySecurityExplicit)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

securityService

protected AdminSecurityService securityService

exploitProtectionService

protected ExploitProtectionService exploitProtectionService

Constructor Detail

AdminSecurityServiceRemote

public AdminSecurityServiceRemote()

Method Detail

getAdminUser

public AdminUser getAdminUser()
                       throws ServiceException,
                              com.gwtincubator.security.exception.ApplicationSecurityException

Specified by:

getAdminUser in interface AdminSecurityService

Throws:

ServiceException

com.gwtincubator.security.exception.ApplicationSecurityException

getPersistentAdminUser

public AdminUser getPersistentAdminUser()

Specified by:

getPersistentAdminUser in interface SecurityVerifier

securityCheck

public void securityCheck(String ceilingEntityFullyQualifiedName,
                          EntityOperationType operationType)
                   throws ServiceException

Specified by:

securityCheck in interface SecurityVerifier

Throws:

ServiceException

isEntitySecurityExplicit

public boolean isEntitySecurityExplicit()

Specified by:

isEntitySecurityExplicit in interface SecurityVerifier

setEntitySecurityExplicit

public void setEntitySecurityExplicit(boolean entitySecurityExplicit)

Specified by:

setEntitySecurityExplicit in interface SecurityVerifier